> For the complete documentation index, see [llms.txt](https://docs.incogniton.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.incogniton.com/team-features/roles-and-permissions.md).

# Roles and permissions

Create, edit, duplicate and delete team roles, and choose global, group-specific and cloud-phone permissions for each role.

Click **Team** in the left-side menu and open the **Roles** tab. A role is a set of permissions. You give every team member one role, and the role decides what they can see and do.

<div data-with-frame="true"><figure><img src="https://1094567560-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FH8yXxFJjKNEduZ4cdtjg%2Fuploads%2Fgit-blob-69fe96e55498c0f41ce41e9a0e433295ebd22e68%2Fv5-team-roles-permissions.png?alt=media" alt="Roles tab: a role&#x27;s permissions with one category expanded"><figcaption></figcaption></figure></div>

{% hint style="info" %}
Creating and changing roles is a paid feature. On a free plan you can view roles, but every change shows "This is a paid feature. Upgrade to use it."
{% endhint %}

### Permissions you need

The main account can always manage roles. A team member needs **Create roles** to create or duplicate a role, and **Edit/Delete roles** to edit or delete one. Both are in the **Administration** category.

### View a role

In **Team > Roles**, click a role in the list. The right side shows its **Permissions**, grouped in categories. Each category shows how many permissions are on, for example "3 / 8 enabled". Use **Search permissions** to find a permission, and **Expand all** or **Collapse all** to open or close every category.

### Create a role

{% stepper %}
{% step %}

#### Open the role editor

In **Team > Roles**, click **New role**. The **Create role** window opens.
{% endstep %}

{% step %}

#### Name the role

Enter a **Role name**.
{% endstep %}

{% step %}

#### Choose permissions

Tick the permissions under **Global permissions**, and add groups under **Group-specific permissions** if needed. Both are explained below.
{% endstep %}

{% step %}

#### Save

Click **Create role**.
{% endstep %}
{% endstepper %}

You can also create a role while inviting a member: click **+ Create new role…** in the invite window. See [Manage team members](/team-features/manage-team-members.md).

### Edit, duplicate or delete a role

In **Team > Roles**, select the role.

* To edit it, click **Edit role**, change what you need and click **Save changes**.
* To duplicate it, click the three-dot icon (⋮) and choose **Duplicate role**. Incogniton creates a copy with the same permissions and the word "copy" added to the name.
* To delete it, click ⋮ and choose **Delete role**, then confirm with **Delete**. Members who have this role lose all their permissions immediately, so give them another role first.

You can also right-click a role in the list to edit, duplicate or delete it.

### Global permissions

Global permissions apply to the whole account. In the role editor they sit under **Global permissions**, in these categories:

* **Administration**: team members, roles, tags, integration settings, profile transfers and restoring profiles.
* **Group general**: creating and editing groups, and viewing, adding, editing, launching and transferring profiles in all groups.
* **Proxy library**: viewing, creating, editing and assigning proxies, and managing proxy groups.
* **Cloud phones**: viewing, using and managing the team's cloud phones.
* **Cloud phone groups**: creating, renaming and deleting cloud phone groups.

A global group permission, such as **View profiles in all groups**, works in every group.

### Group-specific permissions

Use group-specific permissions to give a role access to some groups only. Under **Group-specific permissions**, pick a group in **Add group-specific permissions**. A card for that group appears with these permissions:

* **Launch profiles in group**
* **Add profiles to group**
* **Edit/Delete profiles in group**
* **View profiles in group**
* **Transfer profiles in group**

Add one card per group. Click **Remove** on a card to take that group out of the role.

### Cloud phone permissions

The **Cloud phones** category controls the team's cloud phones:

* **View cloud phones**
* **Use cloud phones (power, restart, connect)**
* **Manage cloud phones (edit, proxy, reset, Android version, ADB, root, apps, automation, move)**

The **Cloud phones** category applies to every phone. To limit a role to some phones, use **Cloud phone group permissions**: pick a group in **Add cloud phone group permissions** and choose **View phones in group**, **Use phones in group (power, restart, connect)** or **Manage phones in group (edit, proxy, reset, ADB, apps, automation, move)**.

### The "All" permission in each category

Every category starts with an "All" permission, for example **All administration permissions**, **All group general permissions**, **All Proxy Library general permissions**, **All cloud phone permissions** or **All group permissions**. When you tick it, every other permission in that category is turned on and locked. Untick it to choose permissions one by one again.

### Hide update pop-ups for a role

In the role editor, under **Application updates**, tick **Hide update prompts from members with this role**. Members with this role no longer see the app and browser update pop-ups when Incogniton starts. This is useful for computers that run all day.

The main account is not affected and can still update. Members with this role can also still check for updates themselves.

{% hint style="info" %}
If you still have any questions about roles and permissions, don't hesitate to contact our [support department](https://incogniton.com/contact/).
{% endhint %}